This guide covers:

• Deploying the T-Pot Honeypot in a virtualized environment.
• Exposing honeypot services to the internet.
• Locking down management access to your IP only.
• Using best practices in virtualization and firewalling.

🚀 Overview

T-Pot is a multi-honeypot platform developed by Deutsche Telekom. It bundles several honeypots and management interfaces into a single, Dockerized system with ELK stack integration.

Note: This guide assumes you’re using Proxmox, XCP-ng, or any similar hypervisor, and have basic networking and firewalling knowledge.

📦 Step 1: Create the Virtual Machine

Requirements

Download ISO

You can find the ISO at the official T-Pot GitHub.

wget https://github.com/telekom-security/tpotce/releases/download/XX.X/tpot.iso